Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/87fd3f04-d60b-368d-b9a6-05d1924127f0.roa
File:                     87fd3f04-d60b-368d-b9a6-05d1924127f0.roa (raw, json)
Hash identifier:          VmV7ZdSnxemMPjoUktsZKEy0Gi+Mwg/sPbwKVvPVNm4=
Subject key identifier:   78:88:39:70:19:1C:DB:5C:84:7F:F7:8E:9F:6F:F2:D8:98:0A:E5:45
Certificate issuer:       /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Certificate serial:       010D0C9F4328584F6F2303B1193E7628381E7B20
Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/87fd3f04-d60b-368d-b9a6-05d1924127f0.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     4809
IP address blocks:        2605:9d80:9000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:23:03:b1:19:3e:76:28:38:1e:7b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=1e4bbde0-b896-464b-b973-56891d2eed77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a4:0f:35:c0:ce:d9:d0:5d:40:c1:ee:31:fa:
                    da:93:a8:d5:7e:04:26:05:37:d7:64:5e:f8:16:74:
                    c9:9d:aa:20:ff:95:f2:a9:56:11:bf:d4:25:66:47:
                    fb:a1:8d:0c:37:99:ba:ca:9f:e1:17:97:b0:96:5f:
                    42:e0:0e:1d:ba:fb:6d:0d:b1:52:f0:6a:df:32:4c:
                    eb:b5:8a:cb:e4:ca:b5:40:aa:38:22:48:f4:f7:d4:
                    ac:1e:cd:38:97:c7:dd:2c:73:02:9f:f7:56:b9:2e:
                    0f:fe:86:58:73:cb:9e:22:31:ec:c8:95:ef:e5:97:
                    34:93:95:bc:d4:2e:7c:f8:10:b9:bc:36:ec:00:fe:
                    7d:8e:ad:7e:d8:4b:19:a4:50:4b:f7:d3:da:c1:3d:
                    d8:8a:5e:42:b6:80:4f:d4:b1:e6:51:8c:0a:24:29:
                    42:e8:ff:8f:ba:eb:2c:b6:b3:55:e6:e6:8e:4c:46:
                    54:3b:56:ac:a5:3e:61:10:f1:17:63:f5:09:40:6c:
                    ef:48:16:18:a5:9d:0d:f4:52:ff:19:5e:72:95:c6:
                    34:9f:92:9a:09:8d:30:c9:6c:9e:67:a8:5d:5f:f9:
                    29:b4:ff:20:67:97:85:6e:a0:ad:80:c8:85:35:17:
                    7a:ca:66:e9:e0:2a:5d:dd:9f:48:18:6d:5f:a3:df:
                    d0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:88:39:70:19:1C:DB:5C:84:7F:F7:8E:9F:6F:F2:D8:98:0A:E5:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/87fd3f04-d60b-368d-b9a6-05d1924127f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl

            X509v3 Authority Key Identifier:
                keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9d80:9000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:4f:4d:8f:cb:8c:7d:ed:55:28:e3:ec:9b:4e:cc:31:37:a5:
         07:8a:4e:44:22:f6:4a:e6:dd:68:5b:7e:a1:06:cd:35:45:df:
         c7:66:10:f4:d4:44:47:2c:73:6d:88:ab:60:13:5e:72:ee:04:
         d4:00:b7:11:f3:18:b4:68:6d:76:25:f0:99:2a:38:47:3a:33:
         b5:6b:db:f3:66:b5:6c:b5:49:9b:f5:b1:18:6e:bb:37:ce:7e:
         ae:af:89:94:fe:99:39:4a:a6:32:44:61:e2:22:a7:81:63:9d:
         ff:3d:df:c9:bd:74:cf:a3:2e:95:ed:dd:30:2f:d9:f0:1a:01:
         5a:17:27:1e:17:3f:0d:47:59:e2:fd:9f:6c:10:3b:11:be:3c:
         0c:c3:ed:af:b7:5f:58:91:d3:43:3c:ed:8d:f2:3f:be:30:06:
         93:10:0d:c5:1a:09:d9:91:a2:59:37:88:c7:ec:31:b0:d6:d1:
         05:24:a5:52:d6:b8:b3:ab:32:4c:40:fa:14:df:40:88:aa:e7:
         a5:b5:89:ff:06:e5:5b:12:1b:b1:f9:a9:3c:05:2f:25:4c:fd:
         3c:b7:80:ad:13:f7:2c:24:22:58:d3:f9:5d:74:9d:a7:c8:f5:
         6d:bf:f1:88:83:35:b2:7d:03:fd:fe:39:3f:ed:90:ff:fb:ea:
         1d:b2:14:b8
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9vIwOxGT52KDgeeyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE4Y2Q4M2MtZjdhMC00YmQxLWE5NmUtZDA4NWZmNzhl
Y2FmMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk
MWU0YmJkZTAtYjg5Ni00NjRiLWI5NzMtNTY4OTFkMmVlZDc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaQPNcDO2dBdQMHuMfrak6jVfgQmBTfXZF74
FnTJnaog/5XyqVYRv9QlZkf7oY0MN5m6yp/hF5ewll9C4A4duvttDbFS8GrfMkzr
tYrL5Mq1QKo4Ikj099SsHs04l8fdLHMCn/dWuS4P/oZYc8ueIjHsyJXv5Zc0k5W8
1C58+BC5vDbsAP59jq1+2EsZpFBL99PawT3Yil5CtoBP1LHmUYwKJClC6P+Puuss
trNV5uaOTEZUO1aspT5hEPEXY/UJQGzvSBYYpZ0N9FL/GV5ylcY0n5KaCY0wyWye
Z6hdX/kptP8gZ5eFbqCtgMiFNRd6ymbp4Cpd3Z9IGG1fo9/QTwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHiIOXAZHNtchH/3jp9v8tiYCuVFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMThj
ZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1ZmY3OGVjYWYvODdmZDNmMDQtZDYwYi0z
NjhkLWI5YTYtMDVkMTkyNDEyN2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTE4Y2Q4M2MtZjdhMC00YmQxLWE5
NmUtZDA4NWZmNzhlY2FmL2UxOGNkODNjLWY3YTAtNGJkMS1hOTZlLWQwODVmZjc4
ZWNhZi5jcmwwHwYDVR0jBBgwFoAUeU41jaxFEyeLZZSp4rpU9EwKTccwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lMThjZDgzYy1mN2EwLTRiZDEtYTk2ZS1kMDg1
ZmY3OGVjYWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgWdgJAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAi09Nj8uMfe1VKOPsm07MMTelB4pORCL2SubdaFt+oQbNNUXfx2YQ
9NRERyxzbYirYBNecu4E1AC3EfMYtGhtdiXwmSo4RzoztWvb82a1bLVJm/WxGG67
N85+rq+JlP6ZOUqmMkRh4iKngWOd/z3fyb10z6Mule3dMC/Z8BoBWhcnHhc/DUdZ
4v2fbBA7Eb48DMPtr7dfWJHTQzztjfI/vjAGkxANxRoJ2ZGiWTeIx+wxsNbRBSSl
Uta4s6syTED6FN9AiKrnpbWJ/wblWxIbsfmpPAUvJUz9PLeArRP3LCQiWNP5XXSd
p8j1bb/xiIM1sn0D/f45P+2Q//vqHbIUuA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:43:49 2026 by rpki-client